VXFAVIJUEWGY.SYS – Unknown

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

VXFAVIJUEWGY.SYS – Unknown removal

VXFAVIJUEWGY.SYS size: 85504 bytes
VXFAVIJUEWGY.SYS hash: 4E8714B84525A4CB5656DE350C029BEC

Created files:

%WinDir%\Bindok.exe
%WinDir%\server.exe
%WinDir%\server2.exe
%WinDir%\smss.exe
%SysDir%\drivers\VxfaVIJuEWgy.sys
%TEMP%\zk.exe
%WinDir%\·????????????V101??[???2.0??].exe
%Common Startmenu%\Programs\Startup\smss.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\VxfaVIJuEWgy\Type: 01000000
HKLM\System\CurrentControlSet\Services\VxfaVIJuEWgy\Start: 03000000
HKLM\System\CurrentControlSet\Services\VxfaVIJuEWgy\ImagePath: %WinDir%\System32\drivers\VxfaVIJuEWgy.sys
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Ball: %WinDir%\smss.exe

Detected by UnHackMe:

VXFAVIJUEWGY.SYS
Default location: %SYSDIR%\DRIVERS\VXFAVIJUEWGY.SYS

Dropper information:
MD5: d7193a0018b745d2a206954a55bf922f
File size: 1357586 bytes

Leave a Reply